Port 22

~ 25 May 2023 ~

Spotted: Suspected Russian malware designed to disrupt Euro, Asia energy grids

Netflix's Password-Sharing Ban Offers Security Upsides

Bcrypt, a Popular Password Hashing Algorithm, Starts Its Long Goodbye

Perception Point Report Finds That Advanced Phishing Attacks Grew by 356% in 2022

Memcyco Delivers Real-Time Brandjacking Detection and Protection Solution

Bank of Ghana Opens SOC to Enable Threat Intelligence Sharing

'Operation Magalenha' Attacks Gives Window Into Brazil's Cybercrime Ecosystem

Dark Frost Botnet Launches Devastating DDoS Attacks on Gaming Industry

Zyxel Issues Critical Security Patches for Firewall and VPN Products

So the FBI 'persistently' abused its snoop powers. What's to worry about?

Google Cloud Bug Allows Server Takeover From CloudSQL Service

Dangerous Regions: Isolating Branch Offices in High-Risk Countries

Cynet Protects Hospital From Lethal Infection

New PowerExchange Backdoor Used in Iranian Cyber Attack on UAE Government

CISO Criminalization, Vague Cyber Disclosure Rules Create Angst for Security Teams

Alert: Brazilian Hackers Targeting Users of Over 30 Portuguese Banks

On the Poisoning of LLMs

Webinar with Guest Forrester: Browser Security New Approaches

Buhti Ransomware Gang Switches Tactics, Utilizes Leaked LockBit and Babuk Code

Facial recog system used by Met Police shows racial bias at low thresholds

Confirmation & Research Note 1: Pegasus infections in Armenian Civil Society

Shedding light on AceCryptor and its operation

China's Stealthy Hackers Infiltrate U.S. and Guam Critical Infrastructure Undetected

Iranian Agrius Hackers Targeting Israeli Organizations with Moneybird Ransomware

The Security Hole at the Heart of ChatGPT and Bing

GUAC 0.1 Beta: Google's Breakthrough Framework for Secure Software Supply Chains

Five Eyes and Microsoft accuse China of attacking US infrastructure again

~ 24 May 2023 ~

This legit Android app turned into audio-snooping malware and Google missed it

China Hacks US Critical Networks in Guam, Raising Cyberwar Fears

'Volt Typhoon' China-Backed APT Infiltrates US Critical Infrastructure Orgs

Honeywell Releases Cyber Insights to Better Identify Cybersecurity Threats and Vulnerabilities

Harvard Pilgrim Health Care Notifies Individuals of Privacy Incident

Technology Veterans James Wickett and Ken Johnson Launch DryRun Security to Bring Security to Developers

Appdome Launches Build-to-Test, Automated Testing Option for Protected Mobile Apps

Netwrix Report: Enterprises Suffer More Ransomware and Other Malware Attacks Than Smaller Organizations

Philly Inquirer says Cuba ransomware gang's data leak claims are fake news

Threat Actors Compromise Barracuda Email Security Appliances

Volt Typhoon targets US critical infrastructure with living-off-the-land techniques

Google's .zip, .mov Domains Give Social Engineers a Shiny New Tool

OAuth Flaw in Expo Platform Affects Hundreds of Third-Party Sites, Apps

How Universities Can Bridge Cybersecurity's Gender Gap

Israeli Shipping, Logistics Companies Targeted in Watering Hole Attacks

How AI Can Help Organizations Adapt and Recover From Cyberattacks

5 Questions to Ask When Evaluating a New Cybersecurity Technology

Iranian Tortoiseshell Hackers Targeting Israeli Logistics Industry

Indiana, Iowa, and Tennessee Pass Comprehensive Privacy Laws

What to Look for When Selecting a Static Application Security Testing (SAST) Solution

Data Stealing Malware Discovered in Popular Android Screen Recorder App

Legion Malware Upgraded to Target SSH Servers and AWS Credentials

Digital security for the selfemployed: Staying safe without an IT team to help

IT security analyst admits hijacking cyber attack to pocket ransom payments

N. Korean Lazarus Group Targets Microsoft IIS Servers to Deploy Espionage Malware

Cyber Attacks Strike Ukraine's State Bodies in Espionage Operation

US bans North Korean outsourcer and its feisty freelancers

Google Adds Guardrails to Keep AI in Check

~ 23 May 2023 ~

Apria Healthcare says potentially 2M people caught up in IT security breach

SuperMailer Abuse Bypasses Email Security for Super-Sized Credential Theft

What Security Professionals Need to Know About Aggregate Cyber Risk

FBI: Human Trafficking Rings Force Job Seekers Into Cryptokjacking Schemes

Chinese Labs Are Selling Fentanyl Ingredients for Millions in Crypto

Theres Finally a Way to Improve Cloud Container Registry Security

A New Look for Risk in Awareness Training

Dish confirms 300,000 people's data was exposed in February's attack

GoldenJackal: New Threat Group Targeting Middle Eastern and South Asian Governments

Microsoft Build 2023: Announcing new identity, compliance, and security features from Microsoft Security